Before your VMC can be issued, your domain must follow email security protocols, your logo must meet trademark and format requirements, and your business must complete a verification process. These steps confirm your brand’s identity and prepare your email for display with a verified mark.

Step 1: Secure your domain with DMARC

DMARC is an email authentication policy that helps prevent cybercriminals from sending fake messages using your domain. To qualify for a VMC:

• Set your DMARC policy to quarantine or reject (p=quarantine or p=reject)

• Confirm that SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) are properly configured

• Keep your DMARC record active and compliant for at least 30 days before applying for a VMC

Step 2: Use a trademarked logo

Your logo must be officially registered with a recognized trademark office such as the USPTO. To meet the BIMI standard, your logo must:

• Be in square SVG format

• Be available online for later setup

Step 3: Verify your business identity

Your organization must pass a formal validation conducted by a trusted certificate authority. This involves:

• Reviewing your business registration and legal documentation

• Confirming your organization’s legitimacy so your logo appears in supported inboxes

Getting your VMC is a straightforward process that involves preparing your domain, confirming your trademark, and setting up your logo for inbox display. Follow the six steps below to complete your order.

Step 1: Review your email authentication setup

Before applying, your domain must follow DMARC rules. This includes:

• Setting your DMARC policy “quarantine” or “reject” (not “none”)

• Confirming that SPF and DKIM are working together correctly

• Keeping this configuration active for at least 30 days

Step 2: Confirm your trademarked logo

Your logo must be registered with an official trademark office such as the USPTO.

• Use a square SVG file that meets BIMI specifications

Step 3: Contact Sectigo to purchase your VMC

Connect with Sectigo’s sales team to begin the process.

• Submit proof of your trademark

• Request guidance if you're unsure about logo format or DNS setup

Step 4: Upload and configure your logo

Host your SVG logo at a public URL accessible over the web.

• Work with your IT team or web server provider to set up a BIMI TXT record in your DNS

Step 5: Test and verify your display

Use a BIMI testing tool to check your configuration.

• Send test emails to confirm that your BIMI logo appears correctly in supported inboxes

Step 6: Maintain your certificate

Keep your DMARC policy active and check compliance regularly

• Renew your VMC before it expires to keep your logo visible

• Track changes through updates from the BIMI working group